Re: snort 3.1.30 installating error on my setup under ubuntu 20.04

["Nihal Desai \(nihdesai\) via Snort-devel" <snort-devel () lists snort org>]

Hello Dorian,

Make sure you are using latest daq with this. There was  daq release with 3.1.29.0.

Thanks!

--
V/r
Nihal N. Desai

From: Snort-users <snort-users-bounces () lists snort org> on behalf of Dorian ROSSE via Snort-users <snort-users () 
lists snort org>
Date: Tuesday, May 24, 2022 at 2:38 PM
To: Snort-users () lists snort org <snort-users () lists snort org>, snort-devel () lists snort org <snort-devel () 
lists snort org>
Subject: [Snort-users] snort 3.1.30 installating error on my setup under ubuntu 20.04
hello,


the line of command where happen the errors when i try to install the last snort :

'''~/snort_src/snort3-3.1.30.0$ sudo ./configure_cmake.sh --prefix=/usr/bin/  
--with-luajit-libraries=~/snort_src/LuaJIT-2.0.5/  --with-luajit-includes=~/snort_src/LuaJIT-2.0.5/  --enable-tcmalloc 
--with-openssl=~/snort_src/openssl-1.1.1f/  --with-daq-includes=~/snort_src/libdaq-3.0.7/  
--with-daq-libraries=~/snort_src/libdaq-3.0.7/  --with-hyperscan-includes=~/snort_src/hyperscan-5.4.0  
--with-hyperscan-libraries=~/snort_src/hyperscan-5.4.0  --with-uuid-libraries=~/snort_src/debian  
--with-uuid-includes=~/snort_src/debian  --with-pcre-libraries=~/snort_src/pcre-8.45/  
--with-pcre-includes=~/snort_src/pcre-8.45/  --with-dnet-libraries=~/snort_src/libdnet/  
--with-dnet-includes=~/snort_src/libdnet/  --with-iconv-libraries=~/snort_src/libiconv-1.17/  
--with-iconv-includes=~/snort_src/libiconv-1.17/  --with-pcap-libraries=~/snort_src/libpcap/  
--with-pcap-includes=~/snort_src/libpcap/  && cd build && sudo make -j 4 && sudo make -j 4 install
Build Directory : build
Source Directory: /home/dorianrosse/snort_src/snort3-3.1.30.0
CMake Warning:
  Ignoring empty string ("") provided on the command line.


-- The CXX compiler identification is GNU 9.4.0
-- The C compiler identification is GNU 9.4.0
-- Detecting CXX compiler ABI info
-- Detecting CXX compiler ABI info - done
-- Check for working CXX compiler: /usr/bin/c++ - skipped
-- Detecting CXX compile features
-- Detecting CXX compile features - done
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Check for working C compiler: /usr/bin/cc - skipped
-- Detecting C compile features
-- Detecting C compile features - done
-- Performing Test CMAKE_HAVE_LIBC_PTHREAD
-- Performing Test CMAKE_HAVE_LIBC_PTHREAD - Failed
-- Looking for pthread_create in pthreads
-- Looking for pthread_create in pthreads - not found
-- Looking for pthread_create in pthread
-- Looking for pthread_create in pthread - found
-- Found Threads: TRUE
-- Found PkgConfig: /usr/bin/pkg-config (found version "0.29.1")
-- Checking for module 'libdaq>=3.0.7'
--   Requested 'libdaq >= 3.0.7' but version of libdaq is 3.0.6
You may find new versions of libdaq at https://snort.org/downloads
-- Found DAQ: /usr/local/lib/libdaq.so
-- Checking for module 'libdaq_static_dump'
--   Found libdaq_static_dump, version 3.0.6
-- Checking for module 'libdaq_static_savefile'
--   Found libdaq_static_savefile, version 3.0.6
-- Checking for module 'libdaq_static_bpf'
--   Found libdaq_static_bpf, version 3.0.6
-- Checking for module 'libdaq_static_trace'
--   Found libdaq_static_trace, version 3.0.6
-- Checking for module 'libdaq_static_fst'
--   Found libdaq_static_fst, version 3.0.6
-- Checking for module 'libdaq_static_pcap'
--   Found libdaq_static_pcap, version 3.0.6
-- Checking for module 'libdaq_static_nfq'
--   Found libdaq_static_nfq, version 3.0.6
-- Checking for module 'libdaq_static_afpacket'
--   Found libdaq_static_afpacket, version 3.0.6
-- Found DNET: /usr/include
-- Found FLEX: /usr/bin/flex (found suitable version "2.6.4", minimum required is "2.6.0")
-- Checking for module 'hwloc'
--   Found hwloc, version 2.1.0
-- Found HWLOC: /usr/lib/x86_64-linux-gnu/libhwloc.so
-- Checking for module 'luajit'
--   Found luajit, version 2.0.5
-- Found LuaJIT: /usr/local/lib/libluajit-5.1.so (found version "2.0.5")
-- Found OpenSSL: /usr/local/lib/libcrypto.so (found version "1.1.1f")
-- Found PCAP: /usr/local/lib/libpcap.so
-- Performing Test PCAP_LINKS_SOLO
-- Performing Test PCAP_LINKS_SOLO - Success
-- Checking for module 'libpcre'
--   Found libpcre, version 8.45
-- Found PCRE: /usr/local/include
-- Found ZLIB: /usr/lib/x86_64-linux-gnu/libz.so (found version "1.2.11")
CMake Warning (dev) at /usr/local/share/cmake-3.23/Modules/FindPackageHandleStandardArgs.cmake:438 (message):
  The package name passed to `find_package_handle_standard_args` (W3M) does
  not match the name of the calling package (Asciidoc).  This can lead to
  problems in calling code that expects `find_package` result variables
  (e.g., `_FOUND`) to follow a certain pattern.
Call Stack (most recent call first):
  cmake/FindAsciidoc.cmake:34 (find_package_handle_standard_args)
  cmake/include_libraries.cmake:20 (find_package)
  CMakeLists.txt:27 (include)
This warning is for project developers.  Use -Wno-dev to suppress it.

-- install w3m to build all-in-one text user manual (missing: W3M_EXE)
-- Checking for module 'libhs'
--   Found libhs, version 5.4.0
-- Checking for module 'libsafec'
--   Found libsafec, version 3.7.2
-- Checking for module 'uuid'
--   Found uuid, version 2.34.0
-- Checking for module 'libunwind'
--   Found libunwind, version 1.21
-- Found Libunwind: /usr/lib/x86_64-linux-gnu/libunwind.so (found version "1.21")
-- Performing Test HAS_C_HIDDEN
-- Performing Test HAS_C_HIDDEN - Success
-- Performing Test HAS_CXX_HIDDEN
-- Performing Test HAS_CXX_HIDDEN - Success
-- Checking for module 'libtcmalloc'
--   Found libtcmalloc, version 2.9.1
-- Found TCMalloc: /usr/local/lib/libtcmalloc.so (found version "2.9.1")
-- Looking for malloc_trim
-- Looking for malloc_trim - found
-- Looking for memrchr
-- Looking for memrchr - found
-- Looking for sigaction
-- Looking for sigaction - found
-- Looking for basename_r
-- Looking for basename_r - not found
-- Performing Test HAVE_GNU_STRERROR_R
-- Performing Test HAVE_GNU_STRERROR_R - Success
-- Looking for getrpcent
-- Looking for getrpcent - found
-- Looking for sys/types.h
-- Looking for sys/types.h - found
-- Looking for stdint.h
-- Looking for stdint.h - found
-- Looking for stddef.h
-- Looking for stddef.h - found
-- Check size of long int
-- Check size of long int - done
-- Check size of unsigned long int
-- Check size of unsigned long int - done
-- Performing Test INLINE
-- Performing Test INLINE - Success
-- Performing Test RESTRICT
-- Performing Test RESTRICT - Success
-- Looking for hs_scan in /usr/local/lib/libhs.a
-- Looking for hs_scan in /usr/local/lib/libhs.a - found
-- Looking for hs_compile_lit
-- Looking for hs_compile_lit - not found
-- Looking for lzma_code in /usr/lib/x86_64-linux-gnu/liblzma.so
-- Looking for lzma_code in /usr/lib/x86_64-linux-gnu/liblzma.so - found
-- Looking for backtrace in /usr/lib/x86_64-linux-gnu/libunwind.so
-- Looking for backtrace in /usr/lib/x86_64-linux-gnu/libunwind.so - found
-- Looking for printf_s in /usr/local/lib/libsafec.so
-- Looking for printf_s in /usr/local/lib/libsafec.so - found
-- Looking for uuid_parse in /usr/lib/x86_64-linux-gnu/libuuid.so
-- Looking for uuid_parse in /usr/lib/x86_64-linux-gnu/libuuid.so - found

-------------------------------------------------------
snort version 3.1.30.0

Install options:
    prefix:     /usr/bin
    includes:   /usr/bin/include/snort
    plugins:    /usr/bin/lib/snort

Compiler options:
    CC:             /usr/bin/cc
    CXX:            /usr/bin/c++
    CFLAGS:            -fvisibility=hidden   -DNDEBUG -g -ggdb  -fno-builtin-malloc -fno-builtin-calloc 
-fno-builtin-realloc -fno-builtin-free  -O2 -g -DNDEBUG
    CXXFLAGS:          -fvisibility=hidden   -DNDEBUG -g -ggdb  -fno-builtin-malloc -fno-builtin-calloc 
-fno-builtin-realloc -fno-builtin-free  -O2 -g -DNDEBUG
    EXE_LDFLAGS:
    MODULE_LDFLAGS:

Feature options:
    DAQ Modules:    Static (afpacket;bpf;dump;fst;nfq;pcap;savefile;trace)
    libatomic:      System-provided
    Hyperscan:      ON
    ICONV:          ON
    Libunwind:      ON
    LZMA:           ON
    RPC DB:         Built-in
    SafeC:          ON
    TCMalloc:       ON
    JEMalloc:       OFF
    UUID:           ON
-------------------------------------------------------

-- Configuring done
-- Generating done
-- Build files have been written to: /home/dorianrosse/snort_src/snort3-3.1.30.0/build
Consolidate compiler generated dependencies of target codecs
Consolidate compiler generated dependencies of target root_codecs
[  1%] Built target codecs
[  1%] Built target root_codecs
Consolidate compiler generated dependencies of target tcp_connector
[  1%] Built target tcp_connector
Consolidate compiler generated dependencies of target ips_actions
[  2%] Built target ips_actions
Consolidate compiler generated dependencies of target control
[  2%] Built target control
Consolidate compiler generated dependencies of target link_codecs
Consolidate compiler generated dependencies of target misc_codecs
[  3%] Built target link_codecs
[  4%] Built target misc_codecs
Consolidate compiler generated dependencies of target dump_config
Consolidate compiler generated dependencies of target events
[  5%] Built target dump_config
[  5%] Built target events
Consolidate compiler generated dependencies of target ip_codecs
[  7%] Built target ip_codecs
Consolidate compiler generated dependencies of target file_api
Consolidate compiler generated dependencies of target filter
Consolidate compiler generated dependencies of target flow
Consolidate compiler generated dependencies of target detection
[  7%] Built target filter
[  7%] Building CXX object src/flow/CMakeFiles/flow.dir/flow.cc.o
[  9%] Built target file_api
[  9%] Building CXX object src/framework/CMakeFiles/framework.dir/codec.cc.o
[ 10%] Building CXX object src/framework/CMakeFiles/framework.dir/cursor.cc.o
[ 12%] Built target detection
[ 12%] Building CXX object src/framework/CMakeFiles/framework.dir/data_bus.cc.o
/home/dorianrosse/snort_src/snort3-3.1.30.0/src/flow/flow.cc: In member function ‘void snort::Flow::free_flow_data()’:
/home/dorianrosse/snort_src/snort3-3.1.30.0/src/flow/flow.cc:358:20: error: ‘struct _daq_pkt_hdr’ has no member named 
‘tenant_id’
  358 |             pkthdr.tenant_id = tenant;
      |                    ^~~~~~~~~
make[2]: *** [src/flow/CMakeFiles/flow.dir/build.make:104 : src/flow/CMakeFiles/flow.dir/flow.cc.o] Erreur 1
make[1]: *** [CMakeFiles/Makefile2:3046 : src/flow/CMakeFiles/flow.dir/all] Erreur 2
make[1]: *** Attente des tâches non terminées....
[ 12%] Building CXX object src/framework/CMakeFiles/framework.dir/file_policy.cc.o
[ 12%] Building CXX object src/framework/CMakeFiles/framework.dir/inspector.cc.o
[ 12%] Building CXX object src/framework/CMakeFiles/framework.dir/ips_option.cc.o
[ 12%] Building CXX object src/framework/CMakeFiles/framework.dir/packet_constraints.cc.o
[ 12%] Building CXX object src/framework/CMakeFiles/framework.dir/parameter.cc.o
[ 12%] Building CXX object src/framework/CMakeFiles/framework.dir/module.cc.o
[ 12%] Building CXX object src/framework/CMakeFiles/framework.dir/mpse.cc.o
[ 12%] Building CXX object src/framework/CMakeFiles/framework.dir/mpse_batch.cc.o
[ 13%] Building CXX object src/framework/CMakeFiles/framework.dir/range.cc.o
[ 13%] Building CXX object src/framework/CMakeFiles/framework.dir/value.cc.o
[ 13%] Built target framework
make: *** [Makefile:156 : all] Erreur 2
'''
a good news is than i success to install hyperscan with the last boost !

thank you in advance to help myself fully install snort3,

Regards.


Dorian ROSSE.

_______________________________________________
Snort-devel mailing list
Snort-devel () lists snort org
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!